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1. (currenUy amended) A method of distributing a video cn nference.data to member devices y^a 
of a multicast data group vkanda multicast session, the method comprising the steps of : 

establishing a plurality of virtual channels for the video conference multicast session, each 
virtual channel defined by an amount of time remaining until expiration at least two of which are 
™h K.; nff n pftra hle to 6 -*™~ ^ video conference to mnnher devices associated 

with that respective virtual channel; 

receiving, at a key distributor device, a request from a requestor device to join the 
multicast session, the request device indicating a requested start time for joining the vid eo 
r onference and an a mount of time of utilization of the multicast session; 

selecting a virtual channel from the plurality of virtual channels for communications by the 
requestor by correlating the start time and the a mount of time indicated by the requestor with the 
amount of time remaining until expiration of the virtual channels at that start time; 

forwarding a new key for the selected virtual channel to the requestor; 

forwarding the new virtual channel key to all pre-existing members of the selected virtual 

channel; 

mmbmir p video conference input s i gnals from the requestor device and the other member 
devices to produce a video con ference data signal; and 

distributing the video conference d ata signal to the members of the multicast group via 

each of the virtual channels, 

whereby the requestor device j oins the video conference multicast data group without 
prompting re-keying *f msmher devices m ember of the video conference, associated wrth 
virtual channels other than the selected virtual channel. 

2. (previously presented) A method according to claim 1, wherein each virtual channel of the 
plurality of virtual channels is associated with a different time duration. 

3. (original) A method according to claim 1, wherein no member can be in more than one virtual 
channel- 
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4. (original) A method according to claim 1, further comprising: 

distributing a data key to each multicast virtual channel. 

5. (original) The method according to claim 1, wherein all of the virtual channels reside within one 
domain. 

6. (original) The method according to claim 1, further comprising: 

rekeying the virtual channel key when membership of the virtual channel changes. 

7. (original) The method according to claim 6, wherein in the act of rekeying at least one member 
is present in the virtual channel after the membership changes. 

8. (original) The method according to claim 2, associating an unlimited time duration with a 
virtual channel creating a permanent virtual channel. 

9. (original) The method according to claim 2, wherein a member may join a virtual channel for 
less than the virtual channel's mil time duration. 

10. (original) The method according to claim 2, further comprising: 

creating a lower and upper bounds for the virtual channel based on the time duration of 

the virtual channel. 



1 1. (original) A method according to claim 2, further comprising: 

reassigning time duration for a virtual channel if a virtual channel is freed. 

12. (original) A method according to claim 2, further comprising: 

reassigning time duration for all virtual channels if a virtual channel is freed. 

13. (original) The method according to claim 11, wherein a virtual channel is freed when an upper 
member expires. 
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14. (original) The method according to claim 11, wherein a virtual channel is freed when all 
members expires. 

15. (original) The method according to claim 12, wherein in the act of reassigning further 
comprises the step of reconfiguring the lower and upper hounds of all virtual channels. 

16. (original) The method according to claim 1 1, wherein only the freed virtual channel rekeys the 
virtual channel key to all members of the freed virtual channel. 

17. (currently amended) An apparatus for distributing a video conference data to member devices 
©f via a multicast data group via and a multicast session, the apparatus comprising: 

control logic operable to establish a plurality of virtual channels for the video conference 
multicast session, each virtual channel defined by an amount of time remaining until expiration^ 

two of whi^ are different ™H heins operable to deliver tbr wmtt video conference to 
member devices associated with that respective virtual channel: 

a receiver for receiving a request from a requestor device to join the multicast session, the 
request indicating a requested «t„rt rime for joining the video conference and an amount of time of 
utilization of the multicast session; 

an assignment module for selecting a virtual channel from the plurality of virtual channels 
for communications by the requestor by correlating the start time and the amount of rime 
indicated with the amount of time remaining until expiration of the virtual channels at that start 
time; 

a requestor forwarding module for forwarding a new virtual channel key for the selected 

virtual channel to the requestor; 

a member forwarding module for forwarding the new virtual channel key to all pre- 
existing members of the selected virtual channel; 

a processing module operable to combine video conference input signals from the, 
requestor device and the other member devices to p roduce a video conference data signal; a nd 
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a transmitter for distributing the video conference data signal to the members of the 

multicast group via each of the virtual channels, 

whereby the apparatus enables the requestor device to join the vi deo conference m ulticast 

data group without prompting re-keying of other member drviw of the video conference 

members associated with virtual channels other than the selected virtual channel. 

18. (original) The apparatus according to claim 17, further comprising: 

a virtual channel module which creates each virtual channel based on a time duration. 

19. (original) The apparatus according to claim 17, wherein the assignment module prevents a 
member from being in more than one virtual channel. 

20. (original) The apparatus according to claim 17, farther comprising: 

a data key distributor for distributing a data key to each multicast virtual channel. 

21. (original) The apparatus according to claim 17, wherein the apparatus controls the multicast 
virtual channels which reside within one domain. 



22. (original) The apparatus according to claim 17, further comprising: 

a rekeying module for rekeying a virtual channel when membership of the virtual channel 

changes. 

23. (original) The apparatus according to claim 18, wherein the virtual channel module creates a 
permanent virtual channel with an unlimited duration. 

24. (original) The apparatus according to claim 18, wherein the receiver may receive a request to 
join a virtual channel for less than the virtual channers full time duration. 

25. (original) The apparatus according to claim 18, wherein the virtual channel module creates a 
lower and upper bounds for the virtual channel based on the time duration of the virtual channel. 
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26. (original) The apparatus according to claim 18, further comprising: 

a reassignment module for reassigning time duration for a virtual channel if the virtual 

channel is freed. 

27. (original) The apparatus according to claim 18, further comprising: 

a reassignment module for reassigning time duration for all virtual channels if a virtual 
channel is freed. 

28. (original) The apparatus according to claim 27, wherein a virtual channel is freed when an 
upper member expires. 

29. (original) The apparatus according to claim 27, wherein a virtual channel is freed when all 
members expire. 

30. (original) The apparatus according to claim 27, wherein the reassignment module reconfigures 
the lower and upper bounds of all virtual channels. 

3 1. (original) The apparatus according to claim 22, wherein the rekeying module rekeys the 
virtual channel key to all members of a freed virtual channel. 

32. (currently amended) A computer program product for use on a computer system for 
facilitating distribution video conference d ate to member devices vk_efa multicast data group 
and via a multicast session, the computer program product comprising a computer usable medium 
having computer readable program code thereon, the computer readable program code including: 

computer code operable to establish a plurality of virtual channels for the video conference 
multicast session, each virtual channel defined by an amount of time remaining until expiration^ax 
1f*st two of which are different and b eing operable to deliver the same video conference tQ 
member devices associated with that respective virtual channel; 
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receiving a request from a requestor devjcgjo join the multicast session, the request 
indicating a requested ^ ti™ for ioinin* thr video reference and an amount of time of 

utilization of the multicast session; 

computer code for selecting a virtual channel from a the plurality of virtual channels for 
communications by the requestor by correlating st art time and the amount of time indicated by the 
requestor with the amount of time remaining until expiration of the virtual channels at that start 

time : 

computer code for forwarding a new key for the selected virtual channel to the requestor, 
computer code for forwarding the new virtual channel key to all pre-existing members of 

the selected virtual channel; 

f . Tr ^ onerabl* tn combine vi deo conference i nput signals from the requestor 

device and the p*" member devi™* tr> produce a video conferenm data sipnal; a nd 

computer code for distributing the video conference data sjgnaLto the members of the 

multicast group via each of the virtual channels, 

whereby the requestor device joins the multicast data group without prompting re-keying 
otw member d™<** the video conference a ttmbefs associated with virtual channels other 

than the selected virtual channel. 

33. (original) A computer program product according to claim 32, wherein each virtual channel is 
associated with a time duration. 

34. (original) A computer program according to claim 32, wherein no member can be in more 
than one virtual channel. 

35. (original) A computer program product according to claim 32, further cttnprising: 

computer code for distributing a data key to each multicast virtual channel- 

36. (original) The computer program product according to claim 32, wherein all of the virtual 
channels reside within one domain. 
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37. (original) The computer program product according to claim 32, further comprising: 

computer code for rekeying the virtual channel key when membership of the virtual 
channel changes. 

38. (original) The computer program product according to claim 33, further comprising: 

computer code for associating an unlimited duration with a virtual channel creating a 
permanent virtual channel. 

39. (original) The computer program product according to claim 33, wherein a member may join 
a virtual channel for less than the virtual channel's full time duration. 

40. (original) The computer program product according to claim 33, further comprising: 

computer code for creating a lower and upper bounds for the virtual channel based on the 
time duration of the virtual channel. 

41. (original) The computer program product according to claim 33, further comprising: 

computer code for reassigning time duration for a virtual channel if a virtual channel is 

freed. 

42. (original) The computer program product according to claim 33, further comprising: 

computer code for reassigning time duration for all virtual channels if a virtual channel is 

freed. 

43. (original) The computer program product according to claim 41, wherein a virtual channel is 
freed when an upper member expires. 

44. (original) The computer program product according to claim 41, wherein a virtual channel is 
freed when all members expire. 
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45. (original) The computer program product according to claim 42, wherein the computer code 

for reassigning, further comprises: 

computer code for reconfiguring the lower and upper bounds of all virtual channels. 

46. (original) The computer program product according to claim 37, further comprising computer 
code for rekeying a virtual channel key only to the members of a freed virtual channel. 

47. (currently amended) A method of creating a secure multicast session for delivering a video 
r eference to a t least one member, the method comprising: 

establishing, by a network device, a plurality of virtual channels for the multicast session, 
each virtual channel defined by an amount of time remaining until expiratio n, at least two o fwhjch 
artt different r«A Heing onera H * tr> deliver the, same video conference to member devices 
associated with that res pertWe virtual channel: 

associating each member with one of the plurality of multicast virtual channels by 
correlating an amount of time and a start time . indicated by the member with an amount of time 
remaining until expiration of the virtual channels at that start time; 

distributing virtual channel keys to the members, each member receiving one virtual 
channel key selected b ased upon their associated virtual channel; 

^mhminp i video conference input si sals to produce a video confrrpnrft data frp™"- a nd 

for at least one ^fowi rtiaimrin rekeving the virtual channel key when membership 
of the virtual channel changes. 

48. (original) A method according to claim 47, wherein the virtual channel key is sent in a unicast 
session to each member. 

49. (original) A method according to claim 47, wherein each virtual channel is associated with a 
time duration. 

50. (original) A method according to claim 47, wherein no member can be in more than one 
virtual channel. 
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5 1 . (original) A method according to claim 47, further comprising: 

distributing a data key to each multicast virtual channel. 

52. (original) The method according to claim 47, wherein all of the virtual channels reside within 
one domain. 

53. (original) The method according to claim 47, wherein in the act of rekeying at least one 
member is present in the virtual channel after the membership changes. 

54. (original) The method according to claim 48, associating an unlimited duration with a virtual 
channel creating a permanent virtual channel. 

55. (original) The method according to claim 48, wherein a member may join a virtual channel for 
less than the virtual channel's full time duration. 

56. (original) The method according to claim 48, further comprising 

creating a lower and upper bounds for the virtual channel based on the time duration of the virtual 
channel 

57. (original) A method according to claim 48, further comprising: 

reassigning time duration for a virtual channel if a virtual channel is freed. 

58. (original) A method according to claim 48, further comprising: 

reassigning time duration for all virtual channels if a virtual channel is freed. 

59. (original) The method according to claim 57, wherein a virtual channel is freed when an upper 
member expires. 



PAGE 13/20 * RCVD AT 1/2612006 1:01:54 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-6/29 * DMS:2738300« CSID:9782649119* DURATION (mm-ss):04-26 



06-.Jan-2fi 11:59am F roni-Steubi ng.McGu i nass £ Manaras LLP 978 264 9119 T-565 P. 014/020 F-400 

11- Ait Unit: 2135 

Serial No. 09/400,132 " J1 

60. (original) The method according to claim 57, wherein a virtual channel is freed when all 
members expire. 

61. (original) The method according to claim 58, wherein in the act of reassigning further 
comprises the step of reconfiguring the lower and upper bounds of all virtual channels. 

62. (original) The method according to claim 58, wherein only the freed virtual channel rekeys the 
virtual channel key to all members of the freed virtual channel. 

63. (currently amended) An apparatus for creating a secure multicast session for Mvsringa 
vvh fr conference to at least one member, the method comprising: 

a control module for establishing a plurality of virtual channels for the multicast session, 
each virtual channel defined by an amount of time remaining until expiration jrt least two of which 
a™ dfflferent. a nd being ooerablft to deliver th e **™ video conference to member devices 
associated with that respec tive virtual channel: 

an associates module for associating each member with one of the plurality of multicast 
virtual channels by correlating an amount of time and a start time indicated by the member with an 
amount of time remaining until expiration of the virtual channels at that , start time; 

a distribution module for distributing virtual channel keys to the members, each member 
receiving one virtual channel key selected b ased upon their associated virtual channel; 

o r , M cnr curable to comb™ video conference input signals to produce a video 

conference-data signal: a nd 

a rekeying module n pgrahle with at least one of the virtual chann els for rekeying the 
virtual channel key when membership of the virtual channel changes. 

64. (original) The apparatus according to claim 63, wherein in distribution module the virtual 
channel key is sent in a unicast session to each member. 

65. (original) The apparatus according to claim 63, further comprising: 

a virtual channel module which creates each virtual channel based on a time duration. 
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66. (original) The apparatus according to claim 63, wherein the assignment module prevents a 
member from being in more than one virtual channel. 

67. (original) The apparatus according to claim 63, further comprising: 

a data key distributor for distributing a data key to each multicast virtual channel. 

68. (original) The apparatus according to claim 63, wherein the multicast virtual channels reside 
within one domain. 

69. (original) The apparatus according to claim 65, wherein the virtual channel module creates a 
permanent virtual channel with an unlimited duration. 

70. (original) The apparatus according to claim 65, wherein the receiver may receive a request to 
join a virtual channel for less than the virtual channel's full time duration. 

71 . (original) The apparatus according to claim 65, wherein the virtual channel module creates a 
lower and upper bounds for the virtual channel based on the time duration of the virtual channel 

72. (original) The apparatus according to claim 65, further comprising: 

a reassignment module for reassigning time duration for a virtual channel if the virtual 

channel is freed. 

73 . (original) The apparatus according to claim 65, further comprising: 

a reassignment module for reassigning time duration for all virtual channels if a virtual 

channel is freed. 

74. (original) The apparatus according to claim 72, wherein a virtual channel is freed when an 
upper member expires. 
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75. (original) The apparatus according to claim 72, wherein a virtual channel is freed when all 
members expire. 

76. (original) The apparatus according to claim 73, wherein the reassignment module reconfigures 
the lower and upper bounds of all virtual channels. 

77. (original) The apparatus according to claim 63, wherein the rekeying module rekeys the 
virtual channel key to all members of a freed virtual channel. 

78. (currently amended) A computer program product for use on a computer system for creating 
a secure multicast session far Slivering a video conference to ha*«g at least one member, the 
computer program product comprising a computer usable medium having computer readable 
program code thereon, the computer readable program code including: 

computer code for establishing a plurality of virtual channels for the multicast session, 
each virtual channel defined by an amount of time remaining until expiration at W two of which 
»rr different, and being " ngrahle to del iver the same video conference to member devices 
associated with that respective vir tual channel; 

computer code for associating each member with one of the plurality of multicast virtual 
channels by correlating an amount of time and a Man time indicated by the member with an 
amount of time remaining until expiration of the virtual channels attnat start tinie ; 

computer code for distributing virtual channel keys to the members, each member 
receiving one virtual channel key sejgetedbased upon their associated virtual channel 

comnuter code operable to combine video c onference input signals to produce a yidSP 

conference data signal; a nd 

computer code operable for at fo st one of the virtual channels for rekeying the virtual 
channel key when membership of the virtual channel changes. 

79. (original) The apparatus according to claim 78. wherein in distribution module the virtual 
channel key is sent in a unicast session to each member. 
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80. (original) A computer program product according to claim 78, wherein each virtual channel is 
associated with a time duration. 

81 . (original) A computer program product according to claim 78, wherein no member can be in 
more than one virtual channel. 

82. (original) A computer program product according to claim 78, further comprising: 

computer code for distributing a data key to each multicast virtual channel. 

83. (original) The computer program product according to claim 78, wherein all of the virtual 
channels reside within one domain. 

84. (original) The computer program product according to claim 80, further comprising: 

computer code for associating an unlimited duration with a virtual channel creating a 
permanent virtual channel. 

85. (original) The computer program product according to claim 80, wherein a member may join 
a virtual channel for less than the virtual channel's full time duration. 

86. (original) The computer program product according to claim 80, further comprising 

computer code for creating a lower and upper bounds for the virtual channel based on the 
time duration of the virtual channel. 

87. (original) The computer program product according to claim 80, further comprising: 

computer code for reassigning time duration for a virtual channel if a virtual channel is 

freed. 

88. (original) The computer program product according to claim 80, further comprising: 

computer code for reassigning time duration for all virtual channels if a virtual channel is 

freed. 
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89. (original) The computer program product according to claim 81, wherein a virtual channel is 
freed when an upper member expires. 

90. (original) The computer program product according to claim 81, wherein a virtual channel is 
freed when all members expire. 

91. (original) The computer program product according to claim 82, wherein the computer code 
for reassigning further comprises computer code for reconfiguring the lower and upper bounds of 
all virtual channels. 

92. (original) The computer program product according to claim 80, further comprising computer 
code for rekeying a virtual channel key onh/ to the members of the freed virtual channel. 
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